ledgrlive-started[.]wixstudio[.]com

This domain is flagged as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the infrastructure was designed to impersonate legitimate financial or corporate platforms, likely to capture sensitive credentials such as usernames, passwords, or multi-factor authentication codes. The threat type is classified as elevated due to the domain's technical sophistication and prior operational status before takedown. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118 and was registered through GoDaddy.com, LLC on April 27, 2026. It is currently offline but was previously detected by 14 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on one security blocklist and was blocked by PhishDestroy. SSL certification was provided by Let's Encrypt, and detected technologies include Wix, React, Google Cloud, Lodash, HSTS, Google Cloud CDN, and HTTP/3. The page title, '404 Error: Page Not Found | Wix Studio,' suggests the phishing content was removed or relocated post-detection. Mitigation steps for this threat type include immediate blocking of the domain and associated IP address (34.144.206.118) across network security controls. Organizations should monitor for credential reuse attempts from affected users and enforce password resets for any accounts potentially exposed. Security teams are advised to review logs for connections to the domain or IP prior to takedown and correlate with authentication attempts. User awareness training should emphasize identifying phishing indicators, particularly for domains mimicking legitimate services. Additionally, implementing multi-factor authentication and domain-based message authentication (DMARC) policies can reduce the risk of similar attacks.